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CLAIM LISTING 

Please arnend the Claims as follows: 

This listing of claims \Arill replace all prior versions, and listing, of claims in the 
application: 

Applicant has made a good faith efttn to fist each and every prior daim. Including any amGndments or 
changes thereto (or status thereof) in this "Usting' section, however, should then» he any discrepancy 
between the previous version of a claim (or status thereoO and the iistfng not expficiffy amended, canceled 
or Qtharvifise changed by this amendment, only the previous version (and status ther^p^ should be 
referred to as the intent of the Appiicant. 

- Listing of the Claims : 

1. (Curirently Amended) A computer- implemented method for 
securely transmitting an information package from a sender to an 
addressee via a network, the method comprising the steps of: 

determining whether the addressee has a public key; 

in response to the addressee not having a public key: 

encrypting the package with an escrow encryption key; 

storing the escrow key encrypt ed package in escrow for the 
•addressee prior to recei ving a public key f or the addressee ; 

notifying the addressee of the package stored in eecrow; 

.and 

in response to receiving an acknowledgement from the 
addressee : 

issuing new public and private keys to the addressee; and 
in response to subsequently verified authentication ot the 
addressee: 

transmitting the package to the addressee via the network. 

•2. (Original) The method of claim 1, wherein the step of 
determining whether the addressee has a public key comprises the 
.STjib-step of; 
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checking a public key directory for a public key of the 
addressee, 

3. (Original) The method of claim 1, further comprising the step 

of: 

storing the addressee's new public key in a public key 
directory. 

4. (Original) The method of claim 1, wherein the encrypting 
step coTnprises the siib-steps of: 

providing an escrow encryption key and an escrow decryption 

key, 

wherein the escrow encryption and decryption keys comprise 
one of symmetric keys and asymmetric keys ; and 

encrypting the package with the escrow encryption key, 

5. (Previously Presented) The method of claim 1, wherein the 
notifying step ccniprisea the sub-step of: 

sending a notification to the addressee via the network, 
wherein said notification includes an attached module for 
generating private and public keys at the addressee location. 

6- (Original) The method of claim 5, wherein the notification 
comprises one of an e-mail notification, a desktop notification, 
a voice notification, a pager notification, and a facsimile 
notification. 

7, (Original) The method of claim 1, further comprising the 
step of : 
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decrypting the package with an escrow decryption key 
corresponding to the escrow encryption key. 

8. (Original) The method of claini 1, wherein the escrow 
encryption key is different from the new public and private keys 
issued to the addressee- 

9. (Original) The method of claim 1, wherein the 
acknowledgement from the addressee includes an indication of the 
addressee's name and e-mail address, 

10. (Original) The method of claim 1, further comprising the 
step of: 

in response to an address having a public key; 
encrypting the package with the addressee's public key; 
storing the package; 

notifying the addressee of the package; 
authenticating a user as the addressee by manipulating a message 
sent by the addressee encrypted using the addressee's private 
key; and 

transmitting the package to the authenticated addressee in 
response to authenticating the user as the addressee . 

11. (Canceled) 
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12. I (Currently Amended) A corttputer implemented method for 
securely transmitting an information package to an addiressee via 
a netyirork, the method comprising the steps of: 

qLetermining whether the addressee has a public key; 
in response to the addressee not having a public key: 
encrypting the package with an escrow encryption key,- 
storing the esc row key encry p t ed package in escrow for the 
addressee; 

notifying the addressee of the package in escrow; and 
in response to receiving an acknowledgement from the 
addife^see: 

lissuing new public and private keys to the addressees- 
decrypting the package with an escrow decryption key; 
±:e- encrypting the package using the addressee's new public 
key; aind 

transmitting the package to the addressee via the network, 

13. ^'original) The method of claim 12, wherein the step of 
determining whether the addressee has a public key compirises: 

checking a public key directory for a public key of the 
addressee * 

14. (Original) The method of claim 12, further comprising the 
step of: 

Storing the addressee's new public key in a public key 

directory - 

j . 
1 : 

i i ■ 

■ ■ . 
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15. (Preyioualy Presented) The method of claim 12, wherein the 
step of transmitting the package coinprisea the sub-steps of; 

authenticating the user as the addressee using a digital 
signature of addressee; and 

tranisiaitting the package to the authenticated user via the 
network ♦ : 

IS. (original) The method of claim 12, further comprising the 
step of: 

decrypting the package using he addressee's new private . 

key. 

17. (Previously Presented) A system for securely transmitting 
an information package to an addressee via a network, the system 
comprising; 

a directory interface adapted to check a directory to 
deteirmine whether the addressee has a public key; 

an escrow manager, coupled to the directory interface, 
adapted to provide an escrow encryption key for encrypting the 
• paSckage; 

an encryption module, coupled to the escrow key manager, 
adapted to encrypt the package with the escrow encryption key; 

a computer^ readable medium, coupled to the encryption 
module, adapted to store the package in escrow for the 
addressee; 

a notification module, coupled to the computer-rreadable 
medium, adapted to send a notification to the addressee via the 
network; 

; : a key registration module, coupled to the notification 

module., adapted to issue, in response to the addressee 

09/332,358 
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aeknowl edging the notification, new public and private keys to 
the adflresaee; and 

a transmission module, coupled to the key registration 
module; and to the computer-readable medium, adapted to transmit 
the package to the addressee via the network in response to 
successful decryption of a message sent by addressee using the 
new public key of addressee . 

18, (Original) The system of claim 17, further comprising: 

a directory coupled to the directory interface, adapted to 
store a public key of at least one addressee. 

19, (Previously Presented) The system of claim 18, wherein the 
key registration module is further adapted to store the 
addressee's new public key in the directory, 

26-- (Original) The system of claim 17, wherein the notification 
module is adapted to send one of an e-mail notification, a 
desktop notification, a voice notification, a pager- 
notification, and a facsimile notif ication. 

21- (Original) The system of claim 17, wherein the escrow key 
manager is adapted to provide an escrow decryption kiey, the 
system; further comprising: 

a^ decryption module, couple to the transmission module, 
adapted to decrypt the package using the escrow decryption key. 

22, (Original) The method of claim 21, wherein the escrow 
encryf^tion key and the escrow decryption key comprise one of 
symmetric keys and asymmetric keys. 

09/332,358 
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23. . (Original) The system of claim 17, wherein the directory 
interface and the encryption module are each adapted to operate 
within a sending system; wherein the cornputer- readable medium, 
the notification module, and the transmission module are each 
adapted to operate within a server system; and 

wherein the key registration module and the decryption module 
are each adapted to operate within a receiving system. 

24. (Original) The system of claim 23, wherein the key 
registration module is received by the receiving system as an 
attachment to a notification, 

25. - (Original) The system of claim 23, wherein the key 
registration module is received by the receiving system by 
following a hyperlink in a notification. 

26- (Original) The system of claim 23, wherein the transmission 
module within the server system is adapted to transmit the 
package in escrow to the decryption module within the receiving 
system;; and wherein the decryption module within the receiving 
system is adapted to receive the package from the transmisaion 
module > receive an escrow decryption key manager, and decrypt 
the package with the escrow decryption key, 

27- (Previously Presented) The system of claim 23, wherein the 
■ transmission module within the server system is adapted to 

receive an escrow decryption key from the escrow key manager, 
decrypt the package in escrow using the escrow decryption key, 
receive the addressee's public key from a directory, re-encrypt 
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the palck^ge using the addressee's public key, and transmit the 
package to the decryption module within the receiving system; 
and wherein the decryption module within the receiving system is 
adapted to receive the package from the transmission module, 
retrieve the addressee's private key from the key registration 
module, and decrypt the package using the addressee's private 
key- 

^28. (Currently Amended) In a computer-readable medium, a 
^computer program product for securely transmitting an 
information package to an addressee via a network, the computer- 
readable medium comprising program code adapted to perform the 
steps of : 

determining whether the addressee has a public key; 

in response to the addressee not having a public key; 

encrypting the package with an escrow encryption key; 

transmitting the e scrow key encr ypte d file to an escrow 
sto rage area and storing the encr ypted package in escrow for the 
addressee; 

notifying the addressee of the package in escrow; and 
in response to receiving an acknowledgement from the 
addressee; 

transmitting a new public and private keys generation 
module to the addressee; 

issuing new public and private keys at addressee's 
location; an^ 

contingent upon authentication of the addressee based on a 
message sent by addressee subsequent in time to the 
acknowledgement received from the addressee, transmitting the 
package to the addressee via the network; and 
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wherein t he pack ag e is encryioced by at le ast the escrow ke y 
o r the addressee^ g pu blic key during eac h transmis si on o£ th e 
information packa g e acroas the network until the package is 
re ceived by the address ee . 
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;.29. (Previously Presented) The method of claim 1, whezrein said 
step of authentication of the addressee includes the sub- steps 

the iaddressee encrypting a message using addressee' 
private ii&y; 

the addressee sending said private -key encrypted message to 
I the sender; 

the sender decrypting said private -key encrypted message 
using addiressee's public key; 

the sender authenticating the addressee based on. the 
content of the decryption of paid private-key encrypted message / 

30. (Previously Presented) The method of claim 1, wherein said 
step of authentication of the addressee includes the sub- steps 
: of : 

the addressee requesting registration with a certificate 
authority; 

the .certificate authority registering the addressee 
subsequent to verifying at least one of the addressee's name, 
address, telephone number > e-mail address; 

the jCertificate authority generating at least a public key 
associated with the addressee; 

the -certificate authority making the public key available 
for use by the sender; and 

the sender authenticating the addressee based on decryption 
of a message using the public key- 
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31* (New) A Computer- implemented method for securely 
transmitting an information package from a sender to an 
addressee via a network, the method comprising the steps of: 

a sender on a first computer addressing an information 
package to an addressee; 

determining whether the addressee has a public kiey; 

in response to the addressee not having a public key! 

encrypting the package with an escrow encryption key; 

transmitting the escrow key encrypted package tlrrough the 
network to an escrow storage area remote from said first 
computer; 

storing the escrow encrypted package in escrow in said 
escrow storage area for the addressee prior to receiving a 
public key, for the addressee; 

notifying the addressee of the package stored in escrow; 

and 

in response to receiving an acknowledgement from the 
addressee : 

issuing new public and private keys to the addressee; and 
in response to subsequently verified authentication of the 
addressee: 

transmitting the encrypted information package to the 
addressee via the network. 
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